General
- Target 2026-07-30_0f76fac5fdaa162cb297a2c89f525257_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 9.8MB
- Sample260730-2nq9hagg86
- SHA256 f8d925a2900dd73d74f084348f8d8def643eaec5468bbb6ed15cc9254bb6bc96
- MD5 0f76fac5fdaa162cb297a2c89f525257
- SHA1 bf4debe4eb134874964b815d59fb13ff9dc36fbb
- SHA512 c19246defb87a044a098d78df5afa84d8ae438abaac4668ac5d3b22061f2f9caad05b24f385dce925af720c95e789d62b85571e22248cb759446812f82eb77c3
- SSDEEP 196608:NaJ1GKUxqnYffcviLnLDBo6pqMP3vi/Mn/R15fmmpL8HgWKL6qw:MJEKUxqnaBLnxoQPv4Mn/R1FtiXE
- TLSH T13AA6F0369AA01F95F833913403A6C552DA2E7C3A632047CF779CF65A2BB32D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-30_0f76fac5fdaa162cb297a2c89f525257_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_0f76fac5fdaa162cb297a2c89f525257_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_0f76fac5fdaa162cb297a2c89f525257_agent-tesla_cobalt-strike_cryptbot_elex_glassworm_icedid_loki-bot_njrat_vidar
- Size 9.8MB
- SHA256 f8d925a2900dd73d74f084348f8d8def643eaec5468bbb6ed15cc9254bb6bc96
- MD5 0f76fac5fdaa162cb297a2c89f525257
- SHA1 bf4debe4eb134874964b815d59fb13ff9dc36fbb
- SHA512 c19246defb87a044a098d78df5afa84d8ae438abaac4668ac5d3b22061f2f9caad05b24f385dce925af720c95e789d62b85571e22248cb759446812f82eb77c3
- SSDEEP 196608:NaJ1GKUxqnYffcviLnLDBo6pqMP3vi/Mn/R15fmmpL8HgWKL6qw:MJEKUxqnaBLnxoQPv4Mn/R1FtiXE
- TLSH T13AA6F0369AA01F95F833913403A6C552DA2E7C3A632047CF779CF65A2BB32D1147E61E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects KawaiiUnicorn
-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE